Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.mft
File: kMovAtehwSTYqjhky043kXqjJKQ.mft (raw, json)
Hash identifier: sPFCh8iOKN8K5D43tez+zInv4VP6RdUgYe4OCFsj8uQ=
Subject key identifier: F7:92:11:DB:80:7E:54:EF:75:99:A2:79:AF:B3:C9:60:63:C8:DF:E4
Authority key identifier: 90:CA:2F:02:D7:A1:C1:24:D8:AA:38:64:CB:4E:37:91:7A:A3:24:A4
Certificate issuer: /CN=90ca2f02d7a1c124d8aa3864cb4e37917aa324a4
Certificate serial: 01A16EDC1BDB1C13BC8438F84D6A31281C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMovAtehwSTYqjhky043kXqjJKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.mft
Manifest number: B6
Signing time: Sat 24 Oct 2026 17:01:21 +0000
Manifest this update: Sat 24 Oct 2026 17:01:21 +0000
Manifest next update: Sun 25 Oct 2026 17:01:21 +0000
Files and hashes: 1: kMovAtehwSTYqjhky043kXqjJKQ.crl (hash: PAcgHxoQPc1FK3J0ircYHaygWij5LEGfzD4MjujMjKA=)
2: qMiFxTRVISPkgtdPb0IiXJ31t1w.roa (hash: YlVuo9nhEtdftkdgzSmDXZ5Z0EVtZ2rshanOX2KamZE=)
3: yy7vtGMh8xC_BoHGqD8eQM5Te4c.roa (hash: F5EGsyxS3ivhRJ1/PHUpCb2FHWCDJWUwjE1aNL40W8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMovAtehwSTYqjhky043kXqjJKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:dc:1b:db:1c:13:bc:84:38:f8:4d:6a:31:28:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ca2f02d7a1c124d8aa3864cb4e37917aa324a4
Validity
Not Before: Oct 24 17:01:21 2026 GMT
Not After : Oct 25 17:01:21 2026 GMT
Subject: CN=f79211db807e54ef7599a279afb3c96063c8dfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:e4:37:94:b2:b3:e1:84:c3:58:4f:d2:21:
bc:9d:be:44:a5:ef:04:f9:7c:3f:33:90:df:9e:4b:
7a:5c:c7:70:59:21:60:40:8c:9d:7c:92:35:50:c1:
a0:a8:b5:c2:f8:bf:a8:aa:eb:a6:ae:4e:91:4b:3a:
c1:cb:ce:a0:18:20:ac:cb:38:3c:9f:d9:73:f9:c8:
61:d0:51:cc:60:8a:f7:68:43:4b:e5:1a:da:78:b4:
f4:0f:dc:5f:f7:e4:cd:be:2e:54:ca:ad:37:09:f5:
d3:b6:6d:5c:2f:85:a5:2a:32:62:bc:d8:fc:00:14:
f6:6a:c0:5d:05:b9:b2:31:81:5a:e3:88:af:05:8b:
bd:70:74:f9:64:f8:89:2e:63:54:21:a4:76:88:7d:
05:74:4b:91:8a:de:5d:cd:45:21:dd:3c:05:3e:d1:
b2:9d:b2:71:9a:8a:e2:41:88:87:a9:83:f6:60:79:
dd:06:2b:23:fa:8b:03:71:89:96:b7:f8:5b:b4:4f:
67:21:a5:94:f0:a2:43:bf:a5:6f:74:1b:05:25:9d:
d3:36:53:2a:5a:f0:c3:22:2e:1c:1b:7a:71:4d:d7:
14:f2:fa:01:b8:df:9c:1d:b9:c2:86:a2:76:cf:2e:
c2:a1:01:af:8b:29:a9:73:44:9c:62:d2:39:d6:87:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:92:11:DB:80:7E:54:EF:75:99:A2:79:AF:B3:C9:60:63:C8:DF:E4
X509v3 Authority Key Identifier:
keyid:90:CA:2F:02:D7:A1:C1:24:D8:AA:38:64:CB:4E:37:91:7A:A3:24:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMovAtehwSTYqjhky043kXqjJKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:41:c4:6a:23:56:c6:c0:29:22:20:1d:2f:90:c2:8e:6f:88:
0c:66:4b:8f:b3:56:8b:d9:9b:1b:d6:2c:f4:15:22:fe:32:c9:
d6:19:9e:83:17:ed:36:5a:f2:4c:27:a4:9d:08:90:e3:94:f3:
c6:98:96:45:53:75:f3:6b:51:62:03:67:70:cf:bd:bc:85:af:
b3:99:a9:8d:2e:0f:85:53:f3:6f:d8:57:c3:88:db:11:52:b4:
55:93:fb:b6:d8:2b:74:f4:f9:ea:a4:50:f2:44:b2:cc:f2:fa:
ae:4d:17:30:ca:33:04:16:3a:72:e6:54:f7:64:e8:4d:68:04:
c3:85:84:68:77:47:94:e1:73:6d:17:3d:7f:ba:ed:20:a7:ab:
bc:1b:99:ce:ab:34:b0:bf:10:a6:ff:6f:74:13:1d:90:8f:26:
55:b4:f0:18:e8:be:00:c7:b3:a7:64:5d:10:0c:ff:e4:14:90:
a1:f1:a5:d0:ab:6a:06:c4:c0:cd:84:d7:8e:fb:ae:ca:68:ab:
aa:60:0e:70:59:c7:ba:68:d4:11:c1:b5:1f:e5:42:21:c7:89:
c8:3d:2e:ba:86:56:9b:fa:3e:78:3e:24:64:86:87:91:8b:df:
e5:99:05:ee:f8:76:5a:d0:2b:18:23:09:69:b6:2c:80:75:f8:
50:00:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:01:44 2026 by rpki-client